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DETAILED ACTION 



1 . Claims 36-62 are now pending. 

Claims 1-35 are cancelled by applicant. 



Continued Examination Under 37 CFR 1.114 

2. A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1 .17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1 .17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1 .1 14. Applicant's submission filed on 
6/29/2009 has been entered. 



Response to Arguments 

3. Applicant's arguments with respect to claims 36-62 have been considered but are 
moot in view of the new ground(s) of rejection. 



Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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4. Claims 36-62 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Moharram, et al. (US 7,290,286) in view of Immonen (US 6,931,528). 
As per claim 36: 

Moharram discloses the method for generating shared keys comprising: 

providing a first certificate from a first peer to a second peer, the first certificate 
including a plurality of first parameters that comprises a first public key for the first peer; 
(col.1, lines 48-51; 1 st peer is in form of server B) 

generating a second public key by the second peer with at least one parameter 
of the plurality of first parameters and a first private key of the second peer; (col.1, lines 
54-55 and col.1, line 64-col.2, line 5; 2 nd peer is in form of client A) 

providing the generated second public key from the second peer to the first peer; 
(col.1, lines 54-55 and col.3, lines 16-25) 

generating a first shared secret key for the second peer with the first public key 
of the first certificate; and (col.1, lines 57-60 and col.3, lines 23-26) 

generating a second shared secret key for the first peer [with the second public 
key from the second peer and a private key of the first peer], (col.1, lines 57-60 and 
col.3, lines 16-19) 

Immonen discloses each party (i.e. 1 st & 2 nd peers) independently calculates a 
shared secret key where client A (2 nd peer) obtains server B's public key (of 1 st 
certificate) to calculate a (1 st ) shared secret key (col.1 , lines 57-60 and col.3, lines 23- 
26). Immonen also calculates the same process for the (2 nd ) shared secret key for 
server B (1 st peer) so that each party can verify its peer's identity. Thus, Immonen 
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includes a 1 st shared secret key for the 2 nd peer and a 2 nd shared secret key for the 1 st 
peer. However, Immonen does not include the 2 nd shared secret key is generated with 
the 2 nd public key from the 2 nd peer and a private key of the 1 st peer. 

To simplify terminology from one art to another that corresponds to the claimed 
invention, is referred in the rejection as follows: 

First peer (1 st peer) = Server B (Immonen) = Consumer/owner (Moharram) 
Second peer (2 nd peer) = Client A (Immonen) = Peer (Moharram) 
Moharram discloses the consumer (1 st peer) obtains a digital certificate that 
contains the consumer's public key that is sent to peer (2 nd peer) and computes a 
shared secret key (col. 9, lines 30-33). Moharram discloses computing the shared 
secret key from peer's public key and owner private key where owner is referring to the 
consumer (1 st peer) (col. 9, lines 36-45). Therefore, it would have been obvious for a 
person of ordinary skills in the art at the time of the invention to modify Immonen to 
teach generating a 2nd shared secret key for the 1 st peer with the 2 nd public key from 
the 2 nd peer and a private key of the 1 st peer because this shows that the claimed 1 st 
and 2 nd shared secret key are two separate different shared secret keys that are not 
generated the same as one another and verifies the parties' identities which certifies the 
key is his/her own (Moharram-col.9, lines 6-35). 

As per claim 37: See Immonen on col.1, lines 47-67 and col.3, lines 23-45; 

discussing the method of claim 36 and further comprising providing a second certificate 
from the second peer to the first peer, the second certificate comprising a plurality of 
second parameters. 
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As per claim 38: See Moharram on col.9, lines 27-50; discussing the method of 
claim 37 wherein generating the second shared secret key for the first peer with the 
second public key from the second peer and a private key of the first peer further 
comprises generating the second shared secret key for the first peer with the second 
public key from the second peer, the private key of the first peer and at least one of the 
plurality of second parameters. 

As per claim 39: See Immonen on col.1, lines 47-67 and col. 3, lines 23-26 and 
Moharram on col.9, lines 27-50; discussing the method of claim 36 wherein the first 
public key of the first certificate is received from a third party certificate authority. 
As per claim 40: See Immonen on col.1, lines 47-67 and col. 3, lines 23-26; 

discussing the method of claim 36 wherein generating a first shared secret key for the 
second peer with the first public key of the first certificate is carried out independently of 
any public key generated by the first peer and the second peer. 
As per claim 41: See Immonen on col. 3, lines 1-5 and Moharram on col.9, lines 
27-50; discussing the method of claim 36 wherein the plurality of first parameters of the 
first certificate comprises at least one prime number and at least one generator in 
addition to the first public key of the first certificate. 

As per claim 42: See Immonen on col.4, lines 1-5; discussing the method of claim 
37 wherein the plurality of second parameters of the second certificate comprises at 
least one prime number, at least one generator and a public key of the second 
certificate that is received from a third party certificate authority. 
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As per claim 43: See Immonen on col.3, lines 23-26 and Moharram on col., 
lines; discussing the method of claim 42 and wherein the generating a second shared 
secret key for the first peer with the second public key from the second peer and a 
private key of the first peer is carried out without employing either the first public key of 
the first certificate or the public key of the second certificate. 

As per claim 44: See Immonen on col.4, lines 1-5; discussing the method of claim 
37 wherein both the first certificate including the plurality of first parameters and the 
second certificate including the plurality of second parameters are generated 
independently of the first peer and the second peer. 

As per claim 45: See Immonen on col.3, lines 44-45; discussing the method of 
claim 37 wherein both the first certificate and the second certificate comprise Digital 
Signature Algorithm (DSA) type certificates. 

As per claim 46: See Immonen on col.3, lines 43-45; discussing the method of 
claim 37 wherein the plurality of first parameters and the plurality of second parameters 
comprise digital signature standard parameters. 

As per claim 47: See Immonen on col.4, lines 44-52; discussing the method of 
claim 37 wherein the first and second certificates are sent to the second and first peers, 
respectively, over a wireless network. 

As per claim 48: See Immonen on col.4, lines 41-50; discussing the method of 
claim 36 wherein the first peer and the second peer communicate over a network. 
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As per claim 49: See Immonen on col.4, lines 44-52; discussing the method of 
claim 48 wherein the network comprises at least one of a wireless network or a 
Bluetooth network. 

As per claim 50: See Immonen on col.1, lines 47-67 and col.3, lines 23-26; 

discussing the method of claim 36 wherein the first public key of the first certificate is a 
variable used in the step of generating the first shared key. 
As per claim 51: 

Moharram discloses the system comprising: 

a processor; and a memory coupled to the processor, 

the memory containing program code that, when executed by the processor, 
causes the processor to: 

provide a first certificate from a first peer to a second peer, the first certificate 
including a plurality of first parameters that comprises a first public key for the first peer; 
(col.1, lines 48-51; 1 st peer is in form of server B) 

generate a second public key by the second peer with at least one parameter of 
the plurality of first parameters and a first private key of the second peer; (col.1, lines 
54-55 and col.1, line 64-col.2, line 5; 2 nd peer is in form of client A) 

provide a second certificate and the second public key from the second peer to 
the first peer, the second certificate comprising a plurality of second parameters; (col.1, 
lines 54-55 and col.3, lines 16-25) 

generate a first shared secret key for the second peer with the first public key of 
the first certificate; and (col.1, lines 57-60 and col.3, lines 23-26) 
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generate a second shared secret key for the first peer [with the second public key 
from the second peer, a private key from of first peer and at least one of the plurality of 
second parameters], (col.1, lines 57-60 and col.3, lines 16-19) 

Immonen discloses each party (i.e. 1 st & 2 nd peers) independently calculates a 
shared secret key where client A (2 nd peer) obtains server B's public key (of 1 st 
certificate) to calculate a (1 st ) shared secret key (col.1, lines 57-60 and col.3, lines 23- 
26). Immonen also calculates the same process for the (2 nd ) shared secret key for 
server B (1 st peer) so that each party can verify its peer's identity. Thus, Immonen 
includes a 1 st shared secret key for the 2 nd peer and a 2 nd shared secret key for the 1 st 
peer. However, Immonen does not include the 2 nd shared secret key is generated with 
the 2 nd public key from the 2 nd peer and a private key of the 1 st peer. 

To simplify terminology from one art to another that corresponds to the claimed 
invention, is referred in the rejection as follows: 

First peer (1 st peer) = Server B (Immonen) = Consumer/owner (Moharram) 
Second peer (2 nd peer) = Client A (Immonen) = Peer (Moharram) 
Moharram discloses the consumer (1 st peer) obtains a digital certificate that 
contains the consumer's public key that is sent to peer (2 nd peer) and computes a 
shared secret key (col. 9, lines 30-33). Moharram discloses computing the shared 
secret key from peer's public key and owner private key where owner is referring to the 
consumer (1 st peer) (col. 9, lines 36-45). Therefore, it would have been obvious for a 
person of ordinary skills in the art at the time of the invention to modify Immonen to 
teach generating a 2nd shared secret key for the 1 st peer with the 2 nd public key from 
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the 2 nd peer and a private key of the 1 st peer because this shows that the claimed 1 st 
and 2 nd shared secret key are two separate different shared secret keys that are not 
generated the same as one another and verifies the parties' identities which certifies the 
key is his/her own (Moharram-col.9, lines 6-35). 

As per claim 52: See Immonen on col.1, lines 47-67 and col.4, lines 1-5; 

discussing the system of claim 51 wherein both the first certificate including the plurality 
of first parameters and the second certificate including the plurality of second 
parameters are generated independently of the first peer and the second peer. 
As per claim 53: See Immonen on col.3, lines 44-45; discussing the system of 
claim 51 wherein both the first certificate and the second certificate comprise Digital 
Signature Algorithm (DSA) type certificates. 

As per claim 54: See Immonen on col.3, lines 43-45; discussing the system of 
claim 51 wherein the plurality of first parameters and the plurality of second parameters 
comprise digital signature standard parameters. 

As per claim 55: See Immonen on col.4, lines 44-52; discussing the system of 
claim 51 wherein the first and second certificates are sent to the second and first peers, 
respectively, over a wireless network. 

As per claim 56: See Immonen on col.4, lines 44-52; discussing the system of 
claim 51 wherein the first peer and the second peer communicate over a network that 
comprises at least one of a wireless network or a Bluetooth network. 
As per claim 57: 
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Moharram discloses a computer storage medium including data that, when 
accessed by a computer, causes the computer to perform operations comprising: 

providing a first certificate from a first peer to a second peer, the first certificate 
including a plurality of first parameters that comprises a first public key for the first peer; 
(col.1, lines 48-51; 1 st peer is in form of server B) 

generating a second public key by the second peer with at least one parameter 
of the plurality of first parameters and a first private key of the second peer; (col.1, lines 
54-55 and col.1, line 64-col.2, line 5; 2 nd peer is in form of client A) 

providing a second certificate and the second public key from the second peer to 
the first peer, the second certificate comprising a plurality of second parameters; (col.1, 
lines 54-55 and col. 3, lines 16-25) 

generating a first shared secret key for the second peer with the first public key of 
the first certificate; and(col.1, lines 57-60 and col.3, lines 23-25) 

generating a second shared secret key for the first peer [with the second public 
key from the second peer, a private key from of first peer and at least one of the plurality 
of second parameters], (col.1, lines 57-60 and col.3, lines 16-19) 

Immonen discloses each party (i.e. 1 st & 2 nd peers) independently calculates a 
shared secret key where client A (2 nd peer) obtains server B's public key (of 1 st 
certificate) to calculate a (1 st ) shared secret key (col.1 , lines 57-60 and col.3, lines 23- 
26). Immonen also calculates the same process for the (2 nd ) shared secret key for 
server B (1 st peer) so that each party can verify its peer's identity. Thus, Immonen 
includes a 1 st shared secret key for the 2 nd peer and a 2 nd shared secret key for the 1 st 
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peer. However, Immonen does not include the 2 nd shared secret key is generated with 
the 2 nd public key from the 2 nd peer and a private key of the 1 st peer. 

To simplify terminology from one art to another that corresponds to the claimed 
invention, is referred in the rejection as follows: 

First peer (1 st peer) = Server B (Immonen) = Consumer/owner (Moharram) 
Second peer (2 nd peer) = Client A (Immonen) = Peer (Moharram) 
Moharram discloses the consumer (1 st peer) obtains a digital certificate that 
contains the consumer's public key that is sent to peer (2 nd peer) and computes a 
shared secret key (col. 9, lines 30-33). Moharram discloses computing the shared 
secret key from peer's public key and owner private key where owner is referring to the 
consumer (1 st peer) (col. 9, lines 36-45). Therefore, it would have been obvious for a 
person of ordinary skills in the art at the time of the invention to modify Immonen to 
teach generating a 2nd shared secret key for the 1 st peer with the 2 nd public key from 
the 2 nd peer and a private key of the 1 st peer because this shows that the claimed 1 st 
and 2 nd shared secret key are two separate different shared secret keys that are not 
generated the same as one another and verifies the parties' identities which certifies the 
key is his/her own (Moharram-col.9, lines 6-35). 

As per claim 58: See Immonen on col.1, lines 47-67 and col.4, lines 1-5; 

discussing the computer storage medium of claim 57 wherein both the first certificate 
including the plurality of first parameters and the second certificate including the plurality 
of second parameters are generated independently of the first peer and the second 
peer. 
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As per claim 59: See Immonen on col.3, lines 44-45; discussing the computer 

storage medium of claim 57 wherein both the first certificate and the second certificate 

comprise Digital Signature Algorithm (DSA) type certificates. 

As per claim 60: See Immonen on col.4, lines 1-5; discussing the computer 

storage medium of claim 57 wherein the plurality of first parameters and the plurality of 

second parameters comprise digital signature standard parameters. 

As per claim 61: See Immonen on col.4, lines 44-52; discussing the computer 

storage medium of claim 57 wherein the first and second certificates are sent to the 

second and first peers, respectively, over a wireless network. 

As per claim 62: See Immonen on col.4, lines 44-52; discussing the computer 

storage medium of claim 57 wherein the first peer and the second peer communicate 

over a network that comprises at least one of a wireless network or a Bluetooth network. 



Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Leynna T. Truvan whose telephone number is (571) 
272-3851 . The examiner can normally be reached on Monday - Thursday (7:00 - 
5:00PM). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on (571 ) 272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/L T. 1.1 

Examiner, Art Unit 2435 
/Kimyen Vu/ 

Supervisory Patent Examiner, Art Unit 2435 



